* use mysqli instead
* add user login system